cPanel: Web Hosting Control Panel Targeted in Credential Theft Campaign
cPanel is a web hosting control panel that is being targeted in a campaign using compromised GitHub repositories and GitHub Actions runners.…
Tag: credential theft
WebHost Manager (WHM): Server Management Tool Targeted in Attack Campaign
WebHost Manager (WHM) is a server management tool for web hosting that is being targeted alongside cPanel in a campaign using GitHub…
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have uncovered a large-scale campaign that weaponizes compromised GitHub repositories to target cPanel and WebHost Manager (WHM) instances. The activity…
Water Curse: Threat Cluster Using GitHub Ghost Network
Water Curse is a threat cluster tracked by Trend Micro that operates a GitHub-based ghost network to redirect users to malware-laced payloads.…
Information Stealer Targets Cloud and HPC Credentials
A poisoned version of the mrmustard Python library from Xanadu was used to run an information stealer that harvests SSH private keys,…
Modern SOCs Need Multi-Layered Network Detections to Counter AI-Powered Attacks
Modern Security Operations Centers (SOCs) face an escalating threat landscape where AI-equipped attackers, such as those using the autonomous exploit engine Claude…
Police Dismantle Kratos Phishing Kit Targeting Microsoft 365 Sessions and Bypassing MFA
German and US law enforcement, in coordination with Indonesian authorities, have dismantled the infrastructure behind Kratos, a sophisticated phishing kit designed to…
Open-Source Android AI Agents Vulnerable to Invisible Screen Text Attacks Leading to Host Code Execution
Researchers have demonstrated that open-source Android AI agent frameworks are vulnerable to a novel attack chain where invisible screen text can lead…
Infostealer Malware: The Root Cause of Snowflake Breaches
Infostealer malware was the primary vector for the Snowflake breaches, harvesting credentials that remained valid for years due to lack of rotation.…
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
A solo Russian-speaking threat actor known as "bandcampro" has been observed using Google's open-source Gemini CLI AI to control a botnet of…